diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2015-11-19 15:50:15 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2015-11-20 13:40:53 +0000 |
commit | 2cc7acd273bc39f1360aed52400d18bb65b88a95 (patch) | |
tree | 1b18d8ea7223e4d5919d8927cca4978755070636 /doc/apps | |
parent | e20b47275109aafc559446d731e6baad4a1f55d1 (diff) | |
download | openssl-2cc7acd273bc39f1360aed52400d18bb65b88a95.zip openssl-2cc7acd273bc39f1360aed52400d18bb65b88a95.tar.gz openssl-2cc7acd273bc39f1360aed52400d18bb65b88a95.tar.bz2 |
Use better defaults for TSA.
Use SHA256 for TSA and setted permitted digests to a sensible value.
Based on PR#4141
Reviewed-by: Matt Caswell <matt@openssl.org>
Diffstat (limited to 'doc/apps')
-rw-r--r-- | doc/apps/ts.pod | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/doc/apps/ts.pod b/doc/apps/ts.pod index 038dfae..82b9e55 100644 --- a/doc/apps/ts.pod +++ b/doc/apps/ts.pod @@ -28,7 +28,7 @@ B<-reply> [B<-passin> password_src] [B<-signer> tsa_cert.pem] [B<-inkey> private.pem] -[B<-md2>|B<-md4>|B<-md5>|B<-sha>|B<-sha1>|B<-mdc2>|B<-ripemd160>|B<...>] +[B<-sha1|-sha224|-sha256|-sha384|-sha512>] [B<-chain> certs_file.pem] [B<-policy> object_id] [B<-in> response.tsr] @@ -216,7 +216,7 @@ variable of the config file. (Optional) The signer private key of the TSA in PEM format. Overrides the B<signer_key> config file option. (Optional) -=item B<-md2>|B<-md4>|B<-md5>|B<-sha>|B<-sha1>|B<-mdc2>|B<-ripemd160>|B<...> +=item B<-sha1|-sha224|-sha256|-sha384|-sha512> Signing digest to use. Overrides the B<signer_digest> config file option. (Optional) @@ -405,8 +405,7 @@ command line option. (Optional) =item B<signer_digest> Signing digest to use. The same as the -B<-md2>|B<-md4>|B<-md5>|B<-sha>|B<-sha1>|B<-mdc2>|B<-ripemd160>|B<...> -command line option. (Optional) +B<-sha1|-sha224|-sha256|-sha384|-sha512> command line option. (Optional) =item B<default_policy> |